IA’s State Privacy Law Portal

In the face of an ever-growing patchwork of U.S. state comprehensive consumer privacy and data security laws with which the insights industry must contend, the Insights Association provides compliance information spinning out from this hub.

In addition to the specifics on each law below, we have some general compliance guidance, including:

• Big Privacy Laws Starting in 2023 in Five States
• Privacy and Data Security Compliance IS Manageable When You Focus on These 5 Things

California Privacy Rights Act (CPRA) / California Consumer Privacy Act (CCPA)

• CCPA/CPRA Portal 

Colorado Privacy Act (CPA)

• New Comprehensive Privacy Law in Colorado - Colorado Privacy Act - S.B. 190
• Rules Finalized for the Colorado Privacy Act

Connecticut Data Privacy Act (CTDPA)

• Connecticut Comprehensive Privacy Bill S.B. 6 Now Law
• Guidance from the Connecticut AG 
• Connecticut Privacy Law Expanded - S.B. 3 Restricts Consumer Health Data and Brings New Minors Privacy Regime
• Connecticut Law H.B. 6607 Prohibits Punitive Damages in Data Breach Lawsuits Against ISO-Compliant Companies

Delaware

• (coming soon)
• Data Destruction Demanded in Delaware for 2015
• Delaware Online Privacy Protection Act (DOPPA)
• Delaware Protection of Personal Information Law

Florida

• Florida Digital Bill of Rights - New Comprehensive Privacy Law Targets Big Tech

Indiana

• New Indiana Privacy Law S.B. 5

Iowa

• New Iowa Comprehensive Data Privacy Law - S.F. 262

Montana

• (Coming soon)

Nevada

• New Nevada health privacy law S.B. 370 is relatively comprehensive

Oregon

• Oregon Consumer Privacy Act - OCPA - Now Law
• New Oregon Data Broker Registry Law Will Snare Some Insights Companies
• Oregon H.B. 3284 Restricts COVID-19-Related Personal Health Data

Tennessee Information Protection Act

• Tennessee Information Protection Act Signed Into Law

Texas Data Privacy and Security Act

• New Law - Texas Data Privacy and Security Act

Utah Consumer Privacy Act

• Utah Consumer Privacy Act S.B. 227 Now Law
• New Utah Law Provides Defense Against Data Breaches for ISO-Compliant Organizations

Virginia Consumer Data Protection Act (VCDPA)

• Virginia the 2nd State with Comprehensive Privacy Regulation - Consumer Data Protection Act Now Law 
• VCDPA - Virginia Privacy Law Changed in 2022

Washington My Health My Data Act

• Washington My Health My Data Act is Now Law - H.B. 1155

This information is not intended and should not be construed as or substituted for legal advice. It is provided for informational purposes only. It is advisable to consult with private counsel on the precise scope and interpretation of any laws/regulation/legislation and their impact on your particular business.